diff --git a/resources/views/hacker/clickjacking.blade.php b/resources/views/hacker/clickjacking.blade.php
index c7a5ee6..5f2ee7e 100644
--- a/resources/views/hacker/clickjacking.blade.php
+++ b/resources/views/hacker/clickjacking.blade.php
@@ -64,9 +64,9 @@
         <button class="bait-button">Claim Prize Now!</button>
 
         <iframe
-            class="malicious-iframe"
-            src="https://webapp.kr-rezvan.ir/profile?allow_framing=true"
-            scrolling="no"
+                class="malicious-iframe"
+                src="http://webapp.kr-rezvan.ir/profile?allow_framing=true&disable_csp=true"
+                scrolling="no"
         ></iframe>
     </div>
 
diff --git a/routes/web.php b/routes/web.php
index 03d4782..45b2db4 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -1,5 +1,6 @@
 <?php
 
+use App\Http\Middleware\VulnerableHeadersMiddleware;
 use Illuminate\Support\Facades\Route;
 use App\Http\Controllers\UserController;
 use App\Http\Controllers\VulnerabilityController;
@@ -11,7 +12,8 @@
 |--------------------------------------------------------------------------
 | این بخش به عنوان سرور C2 (Command and Control) و میزبان پی‌لودها عمل می‌کند.
 */
-Route::domain('hackerapp.eitebar.ir')->group(function () {
+Route::domain('hackerapp.eitebar.ir')->withoutMiddleware([VulnerableHeadersMiddleware::class])
+    ->group(function () {
 
     // داشبورد اصلی هکر (لاگ‌های سرقت شده)
     Route::get('/', [VulnerabilityController::class, 'viewLogs'])->name('hacker.home');